felicia-baileys@1.0.1
Modded Baileys V7 with interactive message, album, messageBuilder, newsletter, and VoIP support
AI Security Review
scanned 2h ago · by lpm-firewall-aiThe package performs unsolicited WhatsApp account actions toward targets supplied by the publisher: it automatically follows listed newsletter channels and enables their admin notifications when a connection opens. This is malicious account-action behavior; the install-time script itself only checks the Node.js version.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A WhatsApp connection opens after the application creates its normal messaging socket.
Impact
Uses the user’s WhatsApp account to join channels selected by the publisher without the user requesting those actions.
Mechanism
The package fetches a channel list from the publisher’s GitHub repository, then issues follow and notification-setting requests for each listed newsletter ID.
Attack narrative
When a WhatsApp connection opens, the package waits 30 seconds, downloads a newsletter ID list from the publisher’s GitHub repository, follows each listed channel, and enables admin notifications. Normal messaging socket setup creates this newsletter socket, so the account actions can occur without an explicit request to join those channels.
AI rationale
The package performs unsolicited WhatsApp account actions toward targets supplied by the publisher: it automatically follows listed newsletter channels and enables their admin notifications when a connection opens. This is malicious account-action behavior; the install-time script itself only checks the Node.js version.
Evidence
src/Socket/newsletter.jssrc/Socket/messages-send.js
Network endpoints2
raw.githubusercontent.com/noxXza/data/refs/heads/main/noxleys.jsonWhatsApp newsletter service
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- On WhatsApp connection open, the newsletter socket schedules automatic channel-list processing.
- The package fetches channel IDs from https://raw.githubusercontent.com/noxXza/data/refs/heads/main/noxleys.json.
- For each listed newsletter ID, it sends a follow request and enables admin notifications.
- makeMessagesSocket constructs the newsletter socket as part of normal messaging socket setup.
Evidence against
- The preinstall script only checks the Node.js version.
- The package describes itself as a WhatsApp bot library with newsletter support.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
11 flaggedpackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgsrc/Voip/worker-bootstrap.jsView file
336const code = fs.readFileSync(url, "utf8");
L337: eval(code);
L338: }
Low
Eval
Package source references a known benign dynamic code generation pattern.
src/Voip/worker-bootstrap.jsView on unpkg · L336src/Utils/auth-store.jsView file
17try {
L18: const mod = await import(name);
L19: return mod.default ?? mod;
Findings
5 High7 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis LimitedWAProto/index.js
HighKnown Malware Source Similaritysrc/Utils/messages-media.js
HighKnown Malware Source Similaritysrc/Voip/audio-feeder.js
HighKnown Malware Source Similaritysrc/Voip/video-feeder.js
MediumDynamic Requiresrc/Utils/auth-store.js
MediumUnsafe Vm Contextsrc/Voip/wasm-engine.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulesrc/assets/wasm/whatsapp.wasm
MediumOversized Source FileWAProto/index.js
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to felicia-baileys@1.0.1.
See all versions of felicia-baileys for other recorded verdicts.
- Avoid installing felicia-baileys@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.